General Topics

User-ID mapping when host has 2 interfaces

We've run into a problem which I understand, I'm just not sure how to fix.  A user on her laptop logs into the domain while her laptop is docked, so UIA has her ip address mapping to the wired connection.  Later, she undocks and flips over to wireles

Erroneous application port

I am getting a deny statement for port 8531 for application ssl. 8531 is for ms-update and my policy allows that but the default policy is denying it because it is tying it to ssl for some strange reason. I don't know how to get around that.

problem on user time session timeout, only countdown

Hi to all,

I'm new on PaloAlto PA-500 7.1 version.
I've searched on and I think I did not find my case.
Sorry if there is not and found it.

I have the wifi sessions (via AP aerohive) timeout all in countdown.

The users are in domain via LDAP and RADIUS.

Th

url filtering question

Hi,

How PA  categorize (business or  research....) and filter if a proxy server re writing a url . 

for example 

if the original url is https://yyyy.com  and after rewriting  it became https://yyyy.com.proxy.mycompany.com 

Is there a possiblity  givin

url filtering logs

Hi,

How to check a website  has been blocked by  urlfiltering 

Thanks

GRE Tunnel Interference

Has anyone seen interferrence with GRE tunnels passing through PANFW's set up in virtualwire for passive IDS? The policies are all any, any, any etc and there is no inspection configured? I've read NAT'ing issues may have something to do with it, but

How Can I Uninstall GlobalProtect Client Mac OS X without install package?

My previous employer used GlobalProtect and I'd like to uninstall it from my Macbook Pro running OS X. I no longer have access to the install package which seems to be the only instruction I could find to intiate the uninstall process. Is there a gen

hsts

Hi,

Sorry to ask a  general question here 

Is there  a reason sometimes hsts break the connection with an error (your cnenction not private ).

If two persons using same browser (eg; chrome ) , for first person it works and second does not 

Is there somet

web-server certificate

Hi,

The certificate issued by the palo alto expired , 

What to do to renew 

Thanks

Link Failover with BGP to Multihomed ISP

This configuration it's for a very particular case on my site.

I have three links with two ISP (for example: ISP1a,ISP1b,ISP2)

I cannot annunce at the same time my entire class over ISP1a and ISP1b for two reason:

1) BGP loop problem

2) For ISP commercia

Globalprotect Mac

Globalprotect stopped working - I unistall and installed again and still not connecting

I am using Mac Sierra version 10.12

Please any suggestions?

Thanks

Rachel